Turning off any network computer stops network communication for 4 to 7 seconds for everyone else
I am on a small network with 23 users using mixed operating systems. 8 of the computers use Windows XP and the other 15 are on Windows 7. There is only one domain controller which is Server 2008 R2. The domain controller is our file, certificate, DHCP, and AD server. Three weeks ago an issue started occurring where network activity would stop for brief periods of 4 to 7 seconds of time at random times over the course of each business day. Not a big delay but when people are accessing databases and the TCP randomly drops, then my life becomes a nightmare.Last night we left all of the computers on and working on various things to see if there was a load issue. Everything ran like a dream for almost four hours until we decided we were done testing. We turned off one computer and network communications stalled. We turned it back on and got all of the computers running the database that stalled out back up. We determined that if any network computer was turned off on the network communication for all other computers would cease for 4-7 seconds.
What we have tried
We changed out the cables on the servers (they were old) to the switches
We replaced the switches (they were even older) with new Gigabit switches
Wiresharked a few PCs and the server to try and see where the failures are happening.
Turning everything on and running as many items as possible to see if the load is killing us.
What we have tried
We changed out the cables on the servers (they were old) to the switches
We replaced the switches (they were even older) with new Gigabit switches
Wiresharked a few PCs and the server to try and see where the failures are happening.
Turning everything on and running as many items as possible to see if the load is killing us.
Last Comment
ASKER
The domain controller is the Master Browser. The service has been shut off on all other running computers.
ASKER
Okay. To add a bit ore strangeness. When PCs are turned on or added the same issue occurs and all network activity stops for 4-7 seconds.
Do you have malware/virus software running on computers
ASKER
Yes. We use Malwarebytes and Vipre on the computers. The antivirus and antimalware has been running since before the behavior started.
I would look hard at the NIC in the server.
Is the server and the computers on the same switch?
Do ipconfig /all for a computer and the server and post
Thanks
Do ipconfig /all for a computer and the server and post
Thanks
ASKER
C:\Users\Administrator.ARM
Windows IP Configuration
Host Name . . . . . . . . . . . . : Servername
Primary Dns Suffix . . . . . . . : networkname.local
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : networkname.local
Ethernet adapter Local Area Connection 2:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Etherne
Physical Address. . . . . . . . . : 90-B1-1C-4A-45-50
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 192.168.1.10(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 192.168.1.10
NetBIOS over Tcpip. . . . . . . . : Enabled
Tunnel adapter isatap.{5DF3615B-847A-4E6F
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Local Area Connection* 9:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Windows IP Configuration
Host Name . . . . . . . . . . . . : Servername
Primary Dns Suffix . . . . . . . : networkname.local
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : networkname.local
Ethernet adapter Local Area Connection 2:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Etherne
Physical Address. . . . . . . . . : 90-B1-1C-4A-45-50
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 192.168.1.10(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 192.168.1.10
NetBIOS over Tcpip. . . . . . . . : Enabled
Tunnel adapter isatap.{5DF3615B-847A-4E6F
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Local Area Connection* 9:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
ASKER
Yes the server and most of the computers are on the same switch but the network drops occur even on the other switches.
can i see ipconfig /all from computers xp and win 7
also what type of router do you have
When you say the network is out
do they loss access to the internet
do they loss access to server shares?
Can you logon to the server when this is happening
we should run
dcdiag >>dclogx.txt
dcdiag /test:registerindns /dnsdomain:networkname.loc
dcdiag /c /v >>dclogx.txt
dcdiag /test:dns >>dclogx.txt
post results
going out now be back later to review
also what type of router do you have
When you say the network is out
do they loss access to the internet
do they loss access to server shares?
Can you logon to the server when this is happening
we should run
dcdiag >>dclogx.txt
dcdiag /test:registerindns /dnsdomain:networkname.loc
dcdiag /c /v >>dclogx.txt
dcdiag /test:dns >>dclogx.txt
post results
going out now be back later to review
ASKER
We have a SonicWall TZ210 router
Whe I say the network is out the entire work loses TCP IP connectivity for 4-7 seconds. Server shares stay up.
Directory Server Diagnosis
Performing initial setup:
Trying to find home server...
Home Server = SERVERNAME
* Identified AD Forest.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site\SERVERN
Starting test: Connectivity
......................... SERVERNAME passed test Connectivity
Doing primary tests
Testing server: Default-First-Site\SERVERN
Starting test: Advertising
......................... SERVERNAME passed test Advertising
Starting test: FrsEvent
......................... SERVERNAME passed test FrsEvent
Starting test: DFSREvent
......................... SERVERNAME passed test DFSREvent
Starting test: SysVolCheck
......................... SERVERNAME passed test SysVolCheck
Starting test: KccEvent
......................... SERVERNAME passed test KccEvent
Starting test: KnowsOfRoleHolders
......................... SERVERNAME passed test KnowsOfRoleHolders
Starting test: MachineAccount
......................... SERVERNAME passed test MachineAccount
Starting test: NCSecDesc
......................... SERVERNAME passed test NCSecDesc
Starting test: NetLogons
......................... SERVERNAME passed test NetLogons
Starting test: ObjectsReplicated
......................... SERVERNAME passed test ObjectsReplicated
Starting test: Replications
......................... SERVERNAME passed test Replications
Starting test: RidManager
......................... SERVERNAME passed test RidManager
Starting test: Services
......................... SERVERNAME passed test Services
Starting test: SystemLog
......................... SERVERNAME passed test SystemLog
Starting test: VerifyReferences
......................... SERVERNAME passed test VerifyReferences
Running partition tests on : DomainDnsZones
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... DomainDnsZones passed test
CrossRefValidation
Running partition tests on : ForestDnsZones
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... ForestDnsZones passed test
CrossRefValidation
Running partition tests on : Schema
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Running partition tests on : Configuration
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Running partition tests on : DOMAINNAME
Starting test: CheckSDRefDom
......................... DOMAINNAME passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... DOMAINNAME passed test CrossRefValidation
Running enterprise tests on : DOMAINNAME.local
Starting test: LocatorCheck
......................... DOMAINNAME.local passed test LocatorCheck
Starting test: Intersite
......................... DOMAINNAME.local passed test Intersite
Test not found. Please re-enter a valid test name.
Directory Server Diagnosis
Performing initial setup:
Trying to find home server...
* Verifying that the local machine SERVERNAME, is a Directory Server.
Home Server = SERVERNAME
* Connecting to directory service on server SERVERNAME.
* Identified AD Forest.
Collecting AD specific global data
* Collecting site info.
Calling ldap_search_init_page(hld,
The previous call succeeded
Iterating through the sites
Looking at base site object: CN=NTDS Site Settings,CN=Default-First-
Getting ISTG and options for the site
* Identifying all servers.
Calling ldap_search_init_page(hld,
The previous call succeeded....
The previous call succeeded
Iterating through the list of servers
Getting information for the server CN=NTDS Settings,CN=SERVERNAME,CN=
objectGuid obtained
InvocationID obtained
dnsHostname obtained
site info obtained
All the info for the server collected
* Identifying all NC cross-refs.
* Found 1 DC(s). Testing 1 of them.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site\SERVERN
Starting test: Connectivity
* Active Directory LDAP Services Check
Determining IP4 connectivity
* Active Directory RPC Services Check
......................... SERVERNAME passed test Connectivity
Doing primary tests
Testing server: Default-First-Site\SERVERN
Starting test: Advertising
The DC SERVERNAME is advertising itself as a DC and having a DS.
The DC SERVERNAME is advertising as an LDAP server
The DC SERVERNAME is advertising as having a writeable directory
The DC SERVERNAME is advertising as a Key Distribution Center
The DC SERVERNAME is advertising as a time server
The DS SERVERNAME is advertising as a GC.
......................... SERVERNAME passed test Advertising
Starting test: CheckSecurityError
* Dr Auth: Beginning security errors check!
Found KDC SERVERNAME for domain DOMAINNAME.local in site Default-First-Site
Checking machine account for DC SERVERNAME on DC SERVERNAME.
* SPN found :LDAP/SERVERNAME.DOMAINNAM
* SPN found :LDAP/SERVERNAME.DOMAINNAM
* SPN found :LDAP/SERVERNAME
* SPN found :LDAP/SERVERNAME.DOMAINNAM
* SPN found :LDAP/1476a3a0-6ce3-489d-b
* SPN found :E3514235-4B06-11D1-AB04-0
* SPN found :HOST/SERVERNAME.DOMAINNAM
* SPN found :HOST/SERVERNAME.DOMAINNAM
* SPN found :HOST/SERVERNAME
* SPN found :HOST/SERVERNAME.DOMAINNAM
* SPN found :GC/SERVERNAME.DOMAINNAME.
[SERVERNAME] No security related replication errors were found on this
DC! To target the connection to a specific source DC use
/ReplSource:<DC>.
......................... SERVERNAME passed test CheckSecurityError
Starting test: CutoffServers
* Configuration Topology Aliveness Check
* Analyzing the alive system replication topology for DC=DomainDnsZones,DC=DOMAI
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for DC=ForestDnsZones,DC=DOMAI
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for CN=Schema,CN=Configuration
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for CN=Configuration,DC=DOMAIN
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for DC=DOMAINNAME,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
......................... SERVERNAME passed test CutoffServers
Starting test: FrsEvent
* The File Replication Service Event log test
......................... SERVERNAME passed test FrsEvent
Starting test: DFSREvent
The DFS Replication Event Log.
Skip the test because the server is running FRS.
......................... SERVERNAME passed test DFSREvent
Starting test: SysVolCheck
* The File Replication Service SYSVOL ready test
File Replication Service's SYSVOL is ready
......................... SERVERNAME passed test SysVolCheck
Starting test: FrsSysVol
* The File Replication Service SYSVOL ready test
File Replication Service's SYSVOL is ready
......................... SERVERNAME passed test FrsSysVol
Starting test: KccEvent
* The KCC Event log test
Found no KCC errors in "Directory Service" Event log in the last 15 minutes.
......................... SERVERNAME passed test KccEvent
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=SERVERNAME,CN=
Role Domain Owner = CN=NTDS Settings,CN=SERVERNAME,CN=
Role PDC Owner = CN=NTDS Settings,CN=SERVERNAME,CN=
Role Rid Owner = CN=NTDS Settings,CN=SERVERNAME,CN=
Role Infrastructure Update Owner = CN=NTDS Settings,CN=SERVERNAME,CN=
......................... SERVERNAME passed test KnowsOfRoleHolders
Starting test: MachineAccount
Checking machine account for DC SERVERNAME on DC SERVERNAME.
* SPN found :LDAP/SERVERNAME.DOMAINNAM
* SPN found :LDAP/SERVERNAME.DOMAINNAM
* SPN found :LDAP/SERVERNAME
* SPN found :LDAP/SERVERNAME.DOMAINNAM
* SPN found :LDAP/1476a3a0-6ce3-489d-b
* SPN found :E3514235-4B06-11D1-AB04-0
* SPN found :HOST/SERVERNAME.DOMAINNAM
* SPN found :HOST/SERVERNAME.DOMAINNAM
* SPN found :HOST/SERVERNAME
* SPN found :HOST/SERVERNAME.DOMAINNAM
* SPN found :GC/SERVERNAME.DOMAINNAME.
......................... SERVERNAME passed test MachineAccount
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC SERVERNAME.
* Security Permissions Check for
DC=DomainDnsZones,DC=DOMAI
(NDNC,Version 3)
* Security Permissions Check for
DC=ForestDnsZones,DC=DOMAI
(NDNC,Version 3)
* Security Permissions Check for
CN=Schema,CN=Configuration
(Schema,Version 3)
* Security Permissions Check for
CN=Configuration,DC=DOMAIN
(Configuration,Version 3)
* Security Permissions Check for
DC=DOMAINNAME,DC=local
(Domain,Version 3)
......................... SERVERNAME passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\SERVERNAME\netlogon
Verified share \\SERVERNAME\sysvol
......................... SERVERNAME passed test NetLogons
Starting test: ObjectsReplicated
SERVERNAME is in domain DC=DOMAINNAME,DC=local
Checking for CN=SERVERNAME,OU=Domain Controllers,DC=DOMAINNAME,
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=SERVERNAME,CN=
Object is up-to-date on all servers.
......................... SERVERNAME passed test ObjectsReplicated
Starting test: OutboundSecureChannels
* The Outbound Secure Channels test
** Did not run Outbound Secure Channels test because /testdomain: was
not entered
......................... SERVERNAME passed test OutboundSecureChannels
Starting test: Replications
* Replications Check
* Replication Latency Check
DC=DomainDnsZones,DC=DOMAI
Latency information for 2 entries in the vector were ignored.
2 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
DC=ForestDnsZones,DC=DOMAI
Latency information for 2 entries in the vector were ignored.
2 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
CN=Schema,CN=Configuration
Latency information for 2 entries in the vector were ignored.
2 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
CN=Configuration,DC=DOMAIN
Latency information for 2 entries in the vector were ignored.
2 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
DC=DOMAINNAME,DC=local
Latency information for 2 entries in the vector were ignored.
2 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
* Replication Site Latency Check
......................... SERVERNAME passed test Replications
Starting test: RidManager
* Available RID Pool for the Domain is 2605 to 1073741823
* SERVERNAME.DOMAINNAME.loca
* DsBind with RID Master was successful
* rIDAllocationPool is 1605 to 2104
* rIDPreviousAllocationPool is 1605 to 2104
* rIDNextRID: 1613
......................... SERVERNAME passed test RidManager
Starting test: Services
* Checking Service: EventSystem
* Checking Service: RpcSs
* Checking Service: NTDS
* Checking Service: DnsCache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: w32time
* Checking Service: NETLOGON
......................... SERVERNAME passed test Services
Starting test: SystemLog
* The System Event log test
Found no errors in "System" Event log in the last 60 minutes.
......................... SERVERNAME passed test SystemLog
Starting test: Topology
* Configuration Topology Integrity Check
* Analyzing the connection topology for DC=DomainDnsZones,DC=DOMAI
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for DC=ForestDnsZones,DC=DOMAI
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for CN=Schema,CN=Configuration
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for CN=Configuration,DC=DOMAIN
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for DC=DOMAINNAME,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
......................... SERVERNAME passed test Topology
Starting test: VerifyEnterpriseReferences
......................... SERVERNAME passed test
VerifyEnterpriseReferences
Starting test: VerifyReferences
The system object reference (serverReference)
CN=SERVERNAME,OU=Domain Controllers,DC=DOMAINNAME,
CN=SERVERNAME,CN=Servers,C
are correct.
The system object reference (serverReferenceBL)
CN=SERVERNAME,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=DOMAI
and backlink on
CN=NTDS Settings,CN=SERVERNAME,CN=
are correct.
The system object reference (frsComputerReferenceBL)
CN=SERVERNAME,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=DOMAI
and backlink on CN=SERVERNAME,OU=Domain Controllers,DC=DOMAINNAME,
correct.
......................... SERVERNAME passed test VerifyReferences
Starting test: VerifyReplicas
......................... SERVERNAME passed test VerifyReplicas
Starting test: DNS
DNS Tests are running and not hung. Please wait a few minutes...
Whe I say the network is out the entire work loses TCP IP connectivity for 4-7 seconds. Server shares stay up.
Directory Server Diagnosis
Performing initial setup:
Trying to find home server...
Home Server = SERVERNAME
* Identified AD Forest.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site\SERVERN
Starting test: Connectivity
......................... SERVERNAME passed test Connectivity
Doing primary tests
Testing server: Default-First-Site\SERVERN
Starting test: Advertising
......................... SERVERNAME passed test Advertising
Starting test: FrsEvent
......................... SERVERNAME passed test FrsEvent
Starting test: DFSREvent
......................... SERVERNAME passed test DFSREvent
Starting test: SysVolCheck
......................... SERVERNAME passed test SysVolCheck
Starting test: KccEvent
......................... SERVERNAME passed test KccEvent
Starting test: KnowsOfRoleHolders
......................... SERVERNAME passed test KnowsOfRoleHolders
Starting test: MachineAccount
......................... SERVERNAME passed test MachineAccount
Starting test: NCSecDesc
......................... SERVERNAME passed test NCSecDesc
Starting test: NetLogons
......................... SERVERNAME passed test NetLogons
Starting test: ObjectsReplicated
......................... SERVERNAME passed test ObjectsReplicated
Starting test: Replications
......................... SERVERNAME passed test Replications
Starting test: RidManager
......................... SERVERNAME passed test RidManager
Starting test: Services
......................... SERVERNAME passed test Services
Starting test: SystemLog
......................... SERVERNAME passed test SystemLog
Starting test: VerifyReferences
......................... SERVERNAME passed test VerifyReferences
Running partition tests on : DomainDnsZones
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... DomainDnsZones passed test
CrossRefValidation
Running partition tests on : ForestDnsZones
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... ForestDnsZones passed test
CrossRefValidation
Running partition tests on : Schema
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Running partition tests on : Configuration
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Running partition tests on : DOMAINNAME
Starting test: CheckSDRefDom
......................... DOMAINNAME passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... DOMAINNAME passed test CrossRefValidation
Running enterprise tests on : DOMAINNAME.local
Starting test: LocatorCheck
......................... DOMAINNAME.local passed test LocatorCheck
Starting test: Intersite
......................... DOMAINNAME.local passed test Intersite
Test not found. Please re-enter a valid test name.
Directory Server Diagnosis
Performing initial setup:
Trying to find home server...
* Verifying that the local machine SERVERNAME, is a Directory Server.
Home Server = SERVERNAME
* Connecting to directory service on server SERVERNAME.
* Identified AD Forest.
Collecting AD specific global data
* Collecting site info.
Calling ldap_search_init_page(hld,
The previous call succeeded
Iterating through the sites
Looking at base site object: CN=NTDS Site Settings,CN=Default-First-
Getting ISTG and options for the site
* Identifying all servers.
Calling ldap_search_init_page(hld,
The previous call succeeded....
The previous call succeeded
Iterating through the list of servers
Getting information for the server CN=NTDS Settings,CN=SERVERNAME,CN=
objectGuid obtained
InvocationID obtained
dnsHostname obtained
site info obtained
All the info for the server collected
* Identifying all NC cross-refs.
* Found 1 DC(s). Testing 1 of them.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site\SERVERN
Starting test: Connectivity
* Active Directory LDAP Services Check
Determining IP4 connectivity
* Active Directory RPC Services Check
......................... SERVERNAME passed test Connectivity
Doing primary tests
Testing server: Default-First-Site\SERVERN
Starting test: Advertising
The DC SERVERNAME is advertising itself as a DC and having a DS.
The DC SERVERNAME is advertising as an LDAP server
The DC SERVERNAME is advertising as having a writeable directory
The DC SERVERNAME is advertising as a Key Distribution Center
The DC SERVERNAME is advertising as a time server
The DS SERVERNAME is advertising as a GC.
......................... SERVERNAME passed test Advertising
Starting test: CheckSecurityError
* Dr Auth: Beginning security errors check!
Found KDC SERVERNAME for domain DOMAINNAME.local in site Default-First-Site
Checking machine account for DC SERVERNAME on DC SERVERNAME.
* SPN found :LDAP/SERVERNAME.DOMAINNAM
* SPN found :LDAP/SERVERNAME.DOMAINNAM
* SPN found :LDAP/SERVERNAME
* SPN found :LDAP/SERVERNAME.DOMAINNAM
* SPN found :LDAP/1476a3a0-6ce3-489d-b
* SPN found :E3514235-4B06-11D1-AB04-0
* SPN found :HOST/SERVERNAME.DOMAINNAM
* SPN found :HOST/SERVERNAME.DOMAINNAM
* SPN found :HOST/SERVERNAME
* SPN found :HOST/SERVERNAME.DOMAINNAM
* SPN found :GC/SERVERNAME.DOMAINNAME.
[SERVERNAME] No security related replication errors were found on this
DC! To target the connection to a specific source DC use
/ReplSource:<DC>.
......................... SERVERNAME passed test CheckSecurityError
Starting test: CutoffServers
* Configuration Topology Aliveness Check
* Analyzing the alive system replication topology for DC=DomainDnsZones,DC=DOMAI
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for DC=ForestDnsZones,DC=DOMAI
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for CN=Schema,CN=Configuration
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for CN=Configuration,DC=DOMAIN
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for DC=DOMAINNAME,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
......................... SERVERNAME passed test CutoffServers
Starting test: FrsEvent
* The File Replication Service Event log test
......................... SERVERNAME passed test FrsEvent
Starting test: DFSREvent
The DFS Replication Event Log.
Skip the test because the server is running FRS.
......................... SERVERNAME passed test DFSREvent
Starting test: SysVolCheck
* The File Replication Service SYSVOL ready test
File Replication Service's SYSVOL is ready
......................... SERVERNAME passed test SysVolCheck
Starting test: FrsSysVol
* The File Replication Service SYSVOL ready test
File Replication Service's SYSVOL is ready
......................... SERVERNAME passed test FrsSysVol
Starting test: KccEvent
* The KCC Event log test
Found no KCC errors in "Directory Service" Event log in the last 15 minutes.
......................... SERVERNAME passed test KccEvent
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=SERVERNAME,CN=
Role Domain Owner = CN=NTDS Settings,CN=SERVERNAME,CN=
Role PDC Owner = CN=NTDS Settings,CN=SERVERNAME,CN=
Role Rid Owner = CN=NTDS Settings,CN=SERVERNAME,CN=
Role Infrastructure Update Owner = CN=NTDS Settings,CN=SERVERNAME,CN=
......................... SERVERNAME passed test KnowsOfRoleHolders
Starting test: MachineAccount
Checking machine account for DC SERVERNAME on DC SERVERNAME.
* SPN found :LDAP/SERVERNAME.DOMAINNAM
* SPN found :LDAP/SERVERNAME.DOMAINNAM
* SPN found :LDAP/SERVERNAME
* SPN found :LDAP/SERVERNAME.DOMAINNAM
* SPN found :LDAP/1476a3a0-6ce3-489d-b
* SPN found :E3514235-4B06-11D1-AB04-0
* SPN found :HOST/SERVERNAME.DOMAINNAM
* SPN found :HOST/SERVERNAME.DOMAINNAM
* SPN found :HOST/SERVERNAME
* SPN found :HOST/SERVERNAME.DOMAINNAM
* SPN found :GC/SERVERNAME.DOMAINNAME.
......................... SERVERNAME passed test MachineAccount
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC SERVERNAME.
* Security Permissions Check for
DC=DomainDnsZones,DC=DOMAI
(NDNC,Version 3)
* Security Permissions Check for
DC=ForestDnsZones,DC=DOMAI
(NDNC,Version 3)
* Security Permissions Check for
CN=Schema,CN=Configuration
(Schema,Version 3)
* Security Permissions Check for
CN=Configuration,DC=DOMAIN
(Configuration,Version 3)
* Security Permissions Check for
DC=DOMAINNAME,DC=local
(Domain,Version 3)
......................... SERVERNAME passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\SERVERNAME\netlogon
Verified share \\SERVERNAME\sysvol
......................... SERVERNAME passed test NetLogons
Starting test: ObjectsReplicated
SERVERNAME is in domain DC=DOMAINNAME,DC=local
Checking for CN=SERVERNAME,OU=Domain Controllers,DC=DOMAINNAME,
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=SERVERNAME,CN=
Object is up-to-date on all servers.
......................... SERVERNAME passed test ObjectsReplicated
Starting test: OutboundSecureChannels
* The Outbound Secure Channels test
** Did not run Outbound Secure Channels test because /testdomain: was
not entered
......................... SERVERNAME passed test OutboundSecureChannels
Starting test: Replications
* Replications Check
* Replication Latency Check
DC=DomainDnsZones,DC=DOMAI
Latency information for 2 entries in the vector were ignored.
2 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
DC=ForestDnsZones,DC=DOMAI
Latency information for 2 entries in the vector were ignored.
2 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
CN=Schema,CN=Configuration
Latency information for 2 entries in the vector were ignored.
2 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
CN=Configuration,DC=DOMAIN
Latency information for 2 entries in the vector were ignored.
2 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
DC=DOMAINNAME,DC=local
Latency information for 2 entries in the vector were ignored.
2 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
* Replication Site Latency Check
......................... SERVERNAME passed test Replications
Starting test: RidManager
* Available RID Pool for the Domain is 2605 to 1073741823
* SERVERNAME.DOMAINNAME.loca
* DsBind with RID Master was successful
* rIDAllocationPool is 1605 to 2104
* rIDPreviousAllocationPool is 1605 to 2104
* rIDNextRID: 1613
......................... SERVERNAME passed test RidManager
Starting test: Services
* Checking Service: EventSystem
* Checking Service: RpcSs
* Checking Service: NTDS
* Checking Service: DnsCache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: w32time
* Checking Service: NETLOGON
......................... SERVERNAME passed test Services
Starting test: SystemLog
* The System Event log test
Found no errors in "System" Event log in the last 60 minutes.
......................... SERVERNAME passed test SystemLog
Starting test: Topology
* Configuration Topology Integrity Check
* Analyzing the connection topology for DC=DomainDnsZones,DC=DOMAI
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for DC=ForestDnsZones,DC=DOMAI
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for CN=Schema,CN=Configuration
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for CN=Configuration,DC=DOMAIN
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for DC=DOMAINNAME,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
......................... SERVERNAME passed test Topology
Starting test: VerifyEnterpriseReferences
......................... SERVERNAME passed test
VerifyEnterpriseReferences
Starting test: VerifyReferences
The system object reference (serverReference)
CN=SERVERNAME,OU=Domain Controllers,DC=DOMAINNAME,
CN=SERVERNAME,CN=Servers,C
are correct.
The system object reference (serverReferenceBL)
CN=SERVERNAME,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=DOMAI
and backlink on
CN=NTDS Settings,CN=SERVERNAME,CN=
are correct.
The system object reference (frsComputerReferenceBL)
CN=SERVERNAME,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=DOMAI
and backlink on CN=SERVERNAME,OU=Domain Controllers,DC=DOMAINNAME,
correct.
......................... SERVERNAME passed test VerifyReferences
Starting test: VerifyReplicas
......................... SERVERNAME passed test VerifyReplicas
Starting test: DNS
DNS Tests are running and not hung. Please wait a few minutes...
The dcdiag looks good. no issues there
How man switches do you have?
How are they connected to the router?
Can you get me an ipconfig from a XP and win 7 computer?
How man switches do you have?
How are they connected to the router?
Can you get me an ipconfig from a XP and win 7 computer?
ASKER
There are three switches. Two Adtran Netvanta switches for the PCs and one POE switch just for the IP phones. I am not at the office but will post on Monday.
I see you have a POE switch. How many POE devices are on this network?
Are the POE devices on the same subnet?
IP phones can saturate the network.
This could be your issue.
Do you have any computers plugged into the poe switch?
Plug each switch into one of the lan ports on your router.
Make the lan port for the poe switch a QOS port. see manual below
http://static.freedomvoice.com/weblink/agent/SonicWALL_Internet&QoS_Guide_V1.0.pdf
Try not to mix computers and phones on same switch would be even better if the poe devices where on a different subnet.
Since on the subject of discovery do you have any wireless routers? How many wireless devices.
Are the POE devices on the same subnet?
IP phones can saturate the network.
This could be your issue.
Do you have any computers plugged into the poe switch?
Plug each switch into one of the lan ports on your router.
Make the lan port for the poe switch a QOS port. see manual below
http://static.freedomvoice.com/weblink/agent/SonicWALL_Internet&QoS_Guide_V1.0.pdf
Try not to mix computers and phones on same switch would be even better if the poe devices where on a different subnet.
Since on the subject of discovery do you have any wireless routers? How many wireless devices.
ASKER
The phones and computers are on separate switches. The POE switch is on the same subnet. There is no wireless.There are 24 phones on the network.
How are the switches connected to the lan?
1. do they each plug into a port on the router?
2. or are they plugged into each other then one to the router?
If no 2 then plug each switch into a sepreate port on the router.
Put the POE switch into a QOS port on the router.
If no 1 then make sure the poe switch is on a QOS port on the router.
Seen issues with IP Phones on the same LAN we have 30 plus IP POE phones but we have them on a seperate LAN and a seperate router.
But you can have them on the same lan as long as you assign qos to the port and they are not daisy chained together.
1. do they each plug into a port on the router?
2. or are they plugged into each other then one to the router?
If no 2 then plug each switch into a sepreate port on the router.
Put the POE switch into a QOS port on the router.
If no 1 then make sure the poe switch is on a QOS port on the router.
Seen issues with IP Phones on the same LAN we have 30 plus IP POE phones but we have them on a seperate LAN and a seperate router.
But you can have them on the same lan as long as you assign qos to the port and they are not daisy chained together.
ASKER
They are linked to each other. I will try your advice tomorrow.
great
keep us posted
keep us posted
ASKER
My boss removed the two new Netvanta 1534 switches he installed and now the problem is gone but now we still don't know what caused the issue in the first place.
ASKER CERTIFIED SOLUTION
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
ASKER
XP Machine
C:\Documents and Settings\pti>ipconfig /all
Windows IP Configuration
Host Name . . . . . . . . . . . . : ARMI08
Primary Dns Suffix . . . . . . . : domainname.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : domainname.local
domainname.local
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . : domainname.local
Description . . . . . . . . . . . : Generic Marvell Yukon Chipset based
Ethernet Controller
Physical Address. . . . . . . . . : 00-16-76-3B-42-A2
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.1.245
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DHCP Server . . . . . . . . . . . : 192.168.1.10
DNS Servers . . . . . . . . . . . : 192.168.1.10
Lease Obtained. . . . . . . . . . : Wednesday, September 11, 2013 3:28:13 AM
Lease Expires . . . . . . . . . . : Wednesday, September 18, 2013 3:28:13 AM
7 Machine
C:\Users\UserA>ipconfig /all
Windows IP Configuration
Host Name . . . . . . . . . . . . : domainname04
Primary Dns Suffix . . . . . . . : domainname.local
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : domainname.local
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . : domainname.local
Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller
Physical Address. . . . . . . . . : A4-1F-72-6D-97-40
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::299e:1848:cc17:a651%
IPv4 Address. . . . . . . . . . . : 192.168.1.240(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : Monday, September 09, 2013 3:13:24 PM
Lease Expires . . . . . . . . . . : Monday, September 16, 2013 3:13:23 PM
Default Gateway . . . . . . . . . : 192.168.1.1
DHCP Server . . . . . . . . . . . : 192.168.1.10
DHCPv6 IAID . . . . . . . . . . . : 245636978
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-18-E3-AA-9D-A4
DNS Servers . . . . . . . . . . . : 192.168.1.10
NetBIOS over Tcpip. . . . . . . . : Enabled
Tunnel adapter isatap.domainname.local:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . : domainname.local
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Local Area Connection* 9:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft 6to4 Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Teredo Tunneling Pseudo-Interface:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
C:\Documents and Settings\pti>ipconfig /all
Windows IP Configuration
Host Name . . . . . . . . . . . . : ARMI08
Primary Dns Suffix . . . . . . . : domainname.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : domainname.local
domainname.local
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . : domainname.local
Description . . . . . . . . . . . : Generic Marvell Yukon Chipset based
Ethernet Controller
Physical Address. . . . . . . . . : 00-16-76-3B-42-A2
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.1.245
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DHCP Server . . . . . . . . . . . : 192.168.1.10
DNS Servers . . . . . . . . . . . : 192.168.1.10
Lease Obtained. . . . . . . . . . : Wednesday, September 11, 2013 3:28:13 AM
Lease Expires . . . . . . . . . . : Wednesday, September 18, 2013 3:28:13 AM
7 Machine
C:\Users\UserA>ipconfig /all
Windows IP Configuration
Host Name . . . . . . . . . . . . : domainname04
Primary Dns Suffix . . . . . . . : domainname.local
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : domainname.local
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . : domainname.local
Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller
Physical Address. . . . . . . . . : A4-1F-72-6D-97-40
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::299e:1848:cc17:a651%
IPv4 Address. . . . . . . . . . . : 192.168.1.240(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : Monday, September 09, 2013 3:13:24 PM
Lease Expires . . . . . . . . . . : Monday, September 16, 2013 3:13:23 PM
Default Gateway . . . . . . . . . : 192.168.1.1
DHCP Server . . . . . . . . . . . : 192.168.1.10
DHCPv6 IAID . . . . . . . . . . . : 245636978
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-18-E3-AA-9D-A4
DNS Servers . . . . . . . . . . . : 192.168.1.10
NetBIOS over Tcpip. . . . . . . . : Enabled
Tunnel adapter isatap.domainname.local:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . : domainname.local
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Local Area Connection* 9:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft 6to4 Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Teredo Tunneling Pseudo-Interface:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Microsoft Legacy OS
The Microsoft Legacy Operating System topic includes legacy versions of Microsoft operating systems prior to Windows 2000: All versions of MS-DOS and other versions developed for specific manufacturers and Windows 3/3.1, Windows 95 and Windows 98, plus any other Windows-related versions, and Windows Mobile.
55K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
TRUSTED BY
Check to see who is the Master Browser